Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/wCetPnuHXvivZcvg-nB5WG2XhQ4.roa
File:                     wCetPnuHXvivZcvg-nB5WG2XhQ4.roa (raw, json)
Hash identifier:          4Yh74lr3J9wyGwv+2vpPjVGwW6ZzDVQ5vG1BmfHb1Ag=
Subject key identifier:   C0:27:AD:3E:7B:87:5E:F8:AF:65:CB:E0:FA:70:79:58:6D:97:85:0E
Certificate issuer:       /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial:       0195BA8C462D8A387D21DDD9CB91C230A319
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/wCetPnuHXvivZcvg-nB5WG2XhQ4.roa
Signing time:             Fri 21 Mar 2025 21:11:49 +0000
ROA not before:           Fri 21 Mar 2025 21:11:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212269
IP address blocks:        194.37.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ba:8c:46:2d:8a:38:7d:21:dd:d9:cb:91:c2:30:a3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
        Validity
            Not Before: Mar 21 21:11:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c027ad3e7b875ef8af65cbe0fa7079586d97850e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:ec:3e:d2:cb:9b:be:1c:59:89:e0:92:39:
                    4d:19:09:94:39:77:53:68:21:dc:9e:45:cc:0b:04:
                    f8:02:46:b0:a3:c0:93:eb:a6:b6:c8:4f:5c:2a:7a:
                    5b:3f:11:1d:56:b5:1f:b4:69:8a:72:fc:69:6e:53:
                    24:3b:7a:36:e8:e8:e8:e6:ac:69:d6:ed:b8:b8:c0:
                    39:0f:35:56:98:1f:58:8f:95:e8:6e:3f:cb:0f:df:
                    71:86:d5:ba:06:be:02:71:45:64:6c:03:2e:48:f2:
                    91:6c:49:ca:32:7b:21:92:e2:7a:dc:dd:d4:47:86:
                    bf:e4:79:77:ac:eb:23:b7:d9:d1:dc:69:bd:f3:45:
                    bf:c6:9c:91:f3:0f:ce:be:67:e6:7e:44:04:1e:9a:
                    5f:44:5d:20:c6:96:d8:e1:b9:a0:49:02:3d:1c:0e:
                    14:f4:ad:fa:2e:be:4b:7b:c3:09:ac:82:38:b2:7c:
                    76:72:e8:74:99:82:c7:e1:12:2d:74:84:76:b9:eb:
                    c9:1c:ed:cf:d2:81:bb:cc:27:14:7e:ea:eb:35:7f:
                    5d:87:95:01:d3:b3:bb:49:c1:6b:3c:6c:c5:b7:89:
                    16:03:99:3a:f5:ec:8a:80:64:ab:40:bf:fc:29:f3:
                    dc:9c:20:52:c3:38:e7:80:c2:96:67:c6:f6:2a:5c:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:27:AD:3E:7B:87:5E:F8:AF:65:CB:E0:FA:70:79:58:6D:97:85:0E
            X509v3 Authority Key Identifier:
                keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/wCetPnuHXvivZcvg-nB5WG2XhQ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.37.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:33:b8:d9:96:a1:d0:c2:cc:ba:79:d1:6a:5b:2c:71:ca:16:
         2d:73:70:68:26:8d:d1:95:58:ed:35:b9:83:71:e3:c0:5f:d2:
         a9:48:8a:ea:89:94:04:de:8d:86:d8:71:6f:03:8f:80:ba:de:
         7f:88:c9:65:94:db:67:b6:f6:89:99:19:da:da:70:e0:2b:90:
         b0:6d:bd:89:51:e5:58:79:29:97:b7:ca:9a:e5:f9:04:03:4c:
         63:df:b6:e3:60:36:c1:89:2c:cd:eb:71:a1:fb:08:da:65:31:
         3b:20:41:1e:67:15:de:6b:71:96:21:c6:2a:2f:71:75:57:2e:
         46:03:bd:42:6a:c5:3d:b3:c1:87:75:b3:34:95:27:4b:55:16:
         74:c5:fa:7e:d3:c1:8f:4c:79:42:52:da:2d:e6:ca:c4:d3:88:
         e8:e8:b4:b7:dc:a0:05:da:4d:1e:13:11:28:0f:70:3b:b8:f2:
         76:bc:6d:27:86:7e:a5:72:ff:48:d8:ef:cd:32:1b:d8:fa:08:
         7a:04:bf:3e:24:65:a2:d0:bd:fd:a9:00:72:62:6f:5d:20:a4:
         a4:49:33:05:83:41:7a:16:02:2c:76:96:69:77:e8:46:c7:db:
         41:cd:07:52:56:c6:42:68:4d:ee:e9:11:b9:6c:51:3a:34:98:
         b9:c7:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net